Store-opart

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Store-opart records in CISA KEV

No Store-opart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Op'art Devis 2 records MEDIUM Multi Html Block 1 record LOW Op'art Easy Redirect 1 record MEDIUM Op'art Limit Quantity 1 record MEDIUM Op'art Product Faq 1 record MEDIUM Op'art Save Cart 1 record HIGH

Records

7 records

TI-2023-17325 CVE-2023-34575 · GHSA-vcr5-684h-q8mg

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote…

HIGH 75

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFront…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2023-09-20 No fix listed CWE-89

TI-2023-27374 CVE-2023-50061 · GHSA-p943-xf69-x33h

PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via…

MEDIUM 50

PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionDispatcher().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00551 Published 2024-02-08 No fix listed CWE-89

TI-2023-18179 CVE-2023-36263 · GHSA-qxp2-xrrh-x42h

Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection.

MEDIUM 50

Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2023-10-31 No fix listed CWE-89

TI-2023-26066 CVE-2023-48188 · GHSA-7mjg-9586-pg6m

SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a…

MEDIUM 45

SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01327 Published 2023-11-27 No fix listed CWE-89

TI-2023-17326 CVE-2023-34576 · GHSA-9w9q-6286-vpxg

SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows…

MEDIUM 44

SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2023-09-21 No fix listed CWE-89

TI-2023-14150 CVE-2023-30148 · GHSA-7v28-76v4-349r

Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock…

LOW 30

Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0, allows remote authenticated users to inject arbitrary web script or H…

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00488 Published 2023-10-14 No fix listed CWE-79

TI-2020-12725 CVE-2020-16194 · GHSA-xh7c-xrrg-3jv2

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart…

LOW 27

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01233 Published 2021-02-04 No fix listed CWE-639

Open these records in search →

Critical	5
High	0
Medium	2
Low	0
No CVSS	0